Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
HackerOne AI Dispute Highlights How Bug Bounty Platforms Handle Vulnerability Data
One of the world’s largest bug bounty platforms, HackerOne, has become the focus of an industry‑wide debate on how artificial ...
ZeroDayRAT: Commercial Mobile Spyware for Android and iOS Spotted on Telegram
A new commercial mobile spyware platform dubbed ZeroDayRAT has surfaced on underground marketplaces in Telegram, offering cybercriminals full remote access ...
APT campaign hits telecom operators in Kyrgyzstan and Tajikistan with LuciDoor and MarsSnake
Telecommunication operators in Kyrgyzstan and Tajikistan have become targets of a prolonged, multi‑stage advanced persistent threat (APT) campaign uncovered by ...
Chrome Extensions Found Collecting Browser History from Tens of Millions of Users
An extensive security analysis of browser add-ons has identified 287 Google Chrome extensions that silently collect and transmit users’ complete ...
0APT: How a Fake Ransomware Group Turned Fear of Data Breaches into an Extortion Tool
At the end of January 2026, a previously unknown group calling itself 0APT appeared on the cybercrime landscape with unusually ...
Tenga Email Breach: Customer Data Exposure and Privacy Risks in the Adult Products Market
Japanese adult products manufacturer Tenga has disclosed a security incident involving the compromise of a corporate email account, potentially exposing ...
Keenadu Android Backdoor: Preinstalled Malware and a Deep Supply Chain Compromise
A newly documented Android backdoor dubbed Keenadu demonstrates how dangerous preinstalled malware and supply chain attacks have become for the ...
First Confirmed OpenClaw AI Agent Configuration Theft Signals New Attack Surface
Cybersecurity researchers have documented the first confirmed theft of OpenClaw AI agent configuration files, marking a significant milestone in the ...
Head Mare Deploys PhantomHeart PowerShell Backdoor in Living-off-the-Land Attacks on Russian Networks
Analysts from Kaspersky have identified a new targeted campaign by the pro-Ukrainian group Head Mare, aimed at Russian government entities ...
SSHStalker Linux Botnet Targets Cloud Servers with SSH Brute-Force and Kernel Exploits
A newly documented Linux botnet dubbed SSHStalker is actively targeting cloud infrastructure, with a particular focus on Oracle Cloud instances. ...